last executing test programs: 8.948020247s ago: executing program 2 (id=2329): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0xff}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 7.678540609s ago: executing program 3 (id=2337): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) 7.57794158s ago: executing program 3 (id=2339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56d45, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xa, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x10008844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.405933778s ago: executing program 2 (id=2342): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x101}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xffffffff, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x100, 0x880, 0x0, 0x0) 5.2865512s ago: executing program 3 (id=2344): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @multicast1, @loopback}}}}}}, 0x27) 5.25129195s ago: executing program 1 (id=2345): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) 5.007028515s ago: executing program 1 (id=2347): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0), 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000040)=0x60) 4.958304695s ago: executing program 2 (id=2348): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f800", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 4.897108947s ago: executing program 0 (id=2349): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.177020709s ago: executing program 4 (id=2350): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) 4.135581029s ago: executing program 2 (id=2351): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x14, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602", 0x11}], 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 4.014560501s ago: executing program 3 (id=2352): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0xff}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca", 0x4a}, {&(0x7f0000000040)="8fac99b31b6cf86d622f", 0x6}, {&(0x7f0000000080)="49dafdf0920cc0a52de279ab7ac1", 0xe}], 0x3) 3.979835422s ago: executing program 4 (id=2353): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) 3.971778652s ago: executing program 0 (id=2354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x36) 3.817536295s ago: executing program 2 (id=2355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56d45, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xa, 0xb}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x10008844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.795281365s ago: executing program 4 (id=2356): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.726519097s ago: executing program 1 (id=2357): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 3.670590177s ago: executing program 0 (id=2358): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff, 0x101}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xffffffff, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x112, 0x880, 0x0, 0x0) 1.494457984s ago: executing program 4 (id=2359): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 1.466984965s ago: executing program 1 (id=2360): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0"], 0x398}}, 0x0) 1.453080215s ago: executing program 3 (id=2361): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, 0x0, 0x0, 0x400021cb, 0x0) syz_open_dev$video(0x0, 0x75, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.282646328s ago: executing program 0 (id=2362): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f800", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 1.1619709s ago: executing program 1 (id=2363): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) 456.559522ms ago: executing program 3 (id=2364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @multicast1, @loopback}}}}}}, 0x27) 295.389265ms ago: executing program 4 (id=2365): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed", 0xa2}], 0x1}, 0x894) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 206.393386ms ago: executing program 0 (id=2366): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x14, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602", 0x11}], 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 150.627557ms ago: executing program 1 (id=2367): write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{0x0}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000040)=0x60) 117.965088ms ago: executing program 2 (id=2368): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) 102.312748ms ago: executing program 4 (id=2369): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 0s ago: executing program 0 (id=2370): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@random="8c5d673ef776", @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "c72975ea5f954511"}}}}}, 0x36) kernel console output (not intermixed with test programs): .227931][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.239294][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.274255][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.291281][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.310933][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.341077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.366862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.436283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.473101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.493399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.521357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.551208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.569741][ T4275] device veth0_vlan entered promiscuous mode [ 81.596661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.606023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.627114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.653139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.677602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.687785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.697797][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.728817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.740517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.748616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.757411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.772328][ T4275] device veth1_vlan entered promiscuous mode [ 81.786374][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.864916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.878775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.889070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.898715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.911679][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.929528][ T4275] device veth0_macvtap entered promiscuous mode [ 81.950117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.958986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.977723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.990814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.038127][ T4275] device veth1_macvtap entered promiscuous mode [ 82.060134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.068465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.116999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.127738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.156607][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.168661][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.183821][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.197735][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.212933][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.232609][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.245716][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.257220][ T4274] device veth0_vlan entered promiscuous mode [ 82.267699][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.293311][ T4276] device veth0_vlan entered promiscuous mode [ 82.307043][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.316625][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.327582][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.337540][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.352576][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.365575][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.383381][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.393334][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.402839][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.412626][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.447591][ T4274] device veth1_vlan entered promiscuous mode [ 82.459204][ T4276] device veth1_vlan entered promiscuous mode [ 82.488921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.497611][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.508055][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.517244][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.525352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.532890][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 82.532935][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 82.546638][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.556144][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.583712][ T4267] device veth0_vlan entered promiscuous mode [ 82.605996][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.613946][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 82.620324][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 82.620336][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 82.637359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.647999][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.657678][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.666688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.675308][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.709597][ T4267] device veth1_vlan entered promiscuous mode [ 82.751630][ T4274] device veth0_macvtap entered promiscuous mode [ 82.764820][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.774002][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.783436][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.792402][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.828761][ T4274] device veth1_macvtap entered promiscuous mode [ 82.838622][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.848043][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.858001][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.867010][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.881676][ T4276] device veth0_macvtap entered promiscuous mode [ 82.910377][ T4276] device veth1_macvtap entered promiscuous mode [ 82.936483][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.953128][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.964096][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.974323][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.985961][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.999565][ T4267] device veth0_macvtap entered promiscuous mode [ 83.014064][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.022634][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.031689][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.039755][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.048933][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.058283][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.068079][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.078292][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.088030][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.097456][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.107836][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.118530][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.128652][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.140497][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.152395][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.162757][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.174758][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.192793][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.206364][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.217198][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.227509][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.238541][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.252690][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.263260][ T4267] device veth1_macvtap entered promiscuous mode [ 83.288079][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.297235][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.307980][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.317730][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.327039][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.336447][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.351324][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.360832][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.369560][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.378775][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.393534][ T4274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.403291][ T4274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.414210][ T4274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.423215][ T4274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.467308][ T4266] device veth0_vlan entered promiscuous mode [ 83.476796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.487218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.503343][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.514578][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.524951][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.544018][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.554438][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.565006][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.585417][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.600556][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.606754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.608555][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.618229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.632361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.640750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.649428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.684385][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.695167][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.705671][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.716351][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.726247][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.738605][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.750978][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.763551][ T4266] device veth1_vlan entered promiscuous mode [ 83.783526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.799318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.823761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.851844][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.865864][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875612][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.885741][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.977475][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.996400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.022041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.060666][ T4266] device veth0_macvtap entered promiscuous mode [ 84.118465][ T4266] device veth1_macvtap entered promiscuous mode [ 84.187720][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.219214][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.252036][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.262238][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.285841][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.314789][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.325786][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.343321][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.361488][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.375591][ T4389] loop0: detected capacity change from 0 to 32768 [ 84.378196][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.384564][ T4389] XFS: ikeep mount option is deprecated. [ 84.403168][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.414087][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.426345][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.458676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.482700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.486184][ T4389] XFS (loop0): Mounting V5 Filesystem [ 84.504683][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.514536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.525757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.536929][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.560226][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.583856][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.594272][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.610971][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.613395][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 84.621164][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 84.634188][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.645450][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.656197][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.667385][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.677939][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.689036][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.700031][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 84.700383][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 84.706085][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 84.738611][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.761229][ T4389] XFS (loop0): Ending clean mount [ 84.781641][ T4389] XFS (loop0): Quotacheck needed: Please wait. [ 84.823783][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.825589][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.834371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.839592][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.854862][ T4389] XFS (loop0): Quotacheck: Done. [ 84.884139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.900392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.908852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.917756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.931027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.939363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.947607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 85.020364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.098154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.173799][ T4266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.193388][ T4266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.206146][ T4266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.218402][ T4266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.236144][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.252158][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.274821][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.314254][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.317691][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.323910][ T4275] XFS (loop0): Unmounting Filesystem [ 85.340862][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.430040][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.662269][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.705126][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.783351][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.804185][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.820215][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.838953][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.653389][ T4429] loop0: detected capacity change from 0 to 512 [ 86.761531][ T4429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.852890][ T7] cfg80211: failed to load regulatory.db [ 87.164119][ T4275] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 87.290324][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 87.736517][ T4447] loop0: detected capacity change from 0 to 32768 [ 87.744256][ T4447] XFS: ikeep mount option is deprecated. [ 87.840698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.849127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.039987][ T4447] XFS (loop0): Mounting V5 Filesystem [ 88.431831][ T4447] XFS (loop0): Ending clean mount [ 88.464235][ T4447] XFS (loop0): Quotacheck needed: Please wait. [ 88.532397][ T4447] XFS (loop0): Quotacheck: Done. [ 89.073958][ T4275] XFS (loop0): Unmounting Filesystem [ 89.216077][ T4477] vxcan1: tx drop: invalid da for name 0x0000000000000008 [ 89.590916][ T4491] loop4: detected capacity change from 0 to 512 [ 89.699384][ T4491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.976249][ T4267] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 91.019510][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 91.279454][ T4523] vxcan1: tx drop: invalid da for name 0x0000000000000008 [ 91.502081][ T4519] loop1: detected capacity change from 0 to 32768 [ 91.509510][ T4519] XFS: ikeep mount option is deprecated. [ 91.714305][ T4519] XFS (loop1): Mounting V5 Filesystem [ 91.793944][ T4519] XFS (loop1): Ending clean mount [ 91.802128][ T4519] XFS (loop1): Quotacheck needed: Please wait. [ 91.838469][ T4519] XFS (loop1): Quotacheck: Done. [ 92.181110][ T4266] XFS (loop1): Unmounting Filesystem [ 92.498834][ T4550] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.342851][ T4564] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.413933][ T4564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 93.849186][ T4580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 94.333243][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 94.369679][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.420924][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.011183][ T4622] siw: device registration error -23 [ 95.651496][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 96.018573][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.055793][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.090250][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.527959][ T4678] siw: device registration error -23 [ 96.777440][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 97.198222][ T4706] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 97.244804][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.302593][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.350188][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.579571][ T4720] siw: device registration error -23 [ 97.752881][ T4726] device bond0 entered promiscuous mode [ 97.780856][ T4726] device bond_slave_0 entered promiscuous mode [ 97.793265][ T4726] device bond_slave_1 entered promiscuous mode [ 97.847113][ T4726] device batadv0 entered promiscuous mode [ 97.935012][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 98.142102][ T4738] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 98.261231][ T4381] udevd[4381]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 98.488403][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 98.598407][ T4756] tipc: Started in network mode [ 98.623737][ T4756] tipc: Node identity e24c8e28d791, cluster identity 4711 [ 98.634148][ T4756] tipc: Enabled bearer , priority 0 [ 98.657407][ T4763] device syzkaller0 entered promiscuous mode [ 98.785562][ T4756] tipc: Resetting bearer [ 98.839591][ T4755] tipc: Resetting bearer [ 98.911237][ T4755] tipc: Disabling bearer [ 99.547081][ T4793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 100.106338][ T4809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.167'. [ 100.548496][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.623556][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.660209][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.097526][ T4830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.112224][ T4835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 101.358790][ T4830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.529356][ T4830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.683617][ T4830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.766147][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 101.981985][ T4830] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.047596][ T4867] Zero length message leads to an empty skb [ 102.074179][ T4830] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.119037][ T4830] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.144284][ T4872] syz.2.192 uses obsolete (PF_INET,SOCK_PACKET) [ 102.173528][ T4830] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.275557][ T4874] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 102.383055][ T4390] udevd[4390]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 102.846474][ T4894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 103.175801][ T4913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 103.708699][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 104.079114][ T4951] tipc: Started in network mode [ 104.099993][ T4951] tipc: Node identity f6a220dde634, cluster identity 4711 [ 104.107346][ T4951] tipc: Enabled bearer , priority 0 [ 104.268104][ T4956] device syzkaller0 entered promiscuous mode [ 104.280647][ T4956] tipc: Resetting bearer [ 104.445395][ T4466] tipc: Resetting bearer [ 104.462155][ T4949] tipc: Resetting bearer [ 105.165474][ T4344] tipc: Node number set to 278274269 [ 106.213901][ T4949] tipc: Disabling bearer [ 107.679326][ T5043] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 108.025253][ T5061] Bluetooth: MGMT ver 1.22 [ 108.573845][ T5084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 108.939611][ T5100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'. [ 109.471785][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.510085][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.517684][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.551611][ T5118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.358475][ T5201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.346'. [ 112.170918][ T5232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 113.174273][ T5272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 113.577685][ T5294] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 113.797321][ T5307] device bond0 entered promiscuous mode [ 113.822460][ T5307] device bond_slave_0 entered promiscuous mode [ 113.828862][ T5307] device bond_slave_1 entered promiscuous mode [ 113.874134][ T5307] device batadv0 entered promiscuous mode [ 113.917991][ T5307] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 113.959499][ T5307] Cannot create hsr debugfs directory [ 113.971107][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 114.168673][ T5317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 114.684001][ T5339] tc_dump_action: action bad kind [ 114.884688][ T5345] device bond0 entered promiscuous mode [ 114.905764][ T5345] device bond_slave_0 entered promiscuous mode [ 114.943556][ T5345] device bond_slave_1 entered promiscuous mode [ 114.967959][ T5345] device batadv0 entered promiscuous mode [ 114.995838][ T5345] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 115.013160][ T5345] Cannot create hsr debugfs directory [ 115.028775][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 115.156459][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 115.465611][ T5371] tc_dump_action: action bad kind [ 115.813339][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 115.909175][ T5386] bridge2: port 1(veth0_to_bond) entered blocking state [ 115.926899][ T5386] bridge2: port 1(veth0_to_bond) entered disabled state [ 115.965034][ T5386] device veth0_to_bond entered promiscuous mode [ 116.041538][ T5390] tipc: Started in network mode [ 116.046643][ T5390] tipc: Node identity 4, cluster identity 4711 [ 116.056021][ T5390] tipc: Node number set to 4 [ 116.068585][ T5383] bridge2: port 2(vlan2) entered blocking state [ 116.075785][ T5383] bridge2: port 2(vlan2) entered disabled state [ 116.108665][ T5383] device vlan2 entered promiscuous mode [ 116.132629][ T5383] device veth1 entered promiscuous mode [ 116.313744][ T5401] device bond0 entered promiscuous mode [ 116.329639][ T5401] device bond_slave_0 entered promiscuous mode [ 116.352780][ T5401] device bond_slave_1 entered promiscuous mode [ 116.388282][ T5401] device batadv0 entered promiscuous mode [ 116.394996][ T5401] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 116.403300][ T5401] Cannot create hsr debugfs directory [ 116.432935][ T5406] tc_dump_action: action bad kind [ 116.438487][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 116.624023][ T5413] netlink: 'syz.4.442': attribute type 6 has an invalid length. [ 116.683754][ T5413] netlink: 'syz.4.442': attribute type 6 has an invalid length. [ 116.787096][ T5419] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 117.174423][ T5437] tc_dump_action: action bad kind [ 117.755091][ T5458] tipc: Enabled bearer , priority 0 [ 117.794257][ T5458] device syzkaller0 entered promiscuous mode [ 117.920990][ T5458] tipc: Resetting bearer [ 117.958676][ T5456] tipc: Resetting bearer [ 118.024434][ T5456] tipc: Disabling bearer [ 118.118600][ T5474] tc_dump_action: action bad kind [ 118.919457][ T5506] tc_dump_action: action bad kind [ 120.109346][ T5551] loop1: detected capacity change from 0 to 16 [ 120.196056][ T5551] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.551643][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 122.329406][ T5603] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 122.340900][ T5603] netlink: 55 bytes leftover after parsing attributes in process `syz.4.520'. [ 122.785738][ T5607] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.830975][ T4335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.056595][ T4335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.097205][ T4335] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.122525][ T4335] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.142882][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 123.160044][ T4335] usb 4-1: SerialNumber: syz [ 123.341309][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 123.412944][ T4335] usb 4-1: 0:2 : does not exist [ 123.518857][ T4335] usb 4-1: USB disconnect, device number 2 [ 123.612212][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.253278][ T5647] netlink: 256 bytes leftover after parsing attributes in process `syz.2.541'. [ 124.403429][ T5651] loop3: detected capacity change from 0 to 64 [ 124.948154][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 125.879137][ T5665] loop2: detected capacity change from 0 to 32768 [ 125.940875][ T5665] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.546 (5665) [ 126.039532][ T5665] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 126.078359][ T5665] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 126.114209][ T5665] BTRFS info (device loop2): force zlib compression, level 3 [ 126.147768][ T5665] BTRFS info (device loop2): force clearing of disk cache [ 126.189941][ T5665] BTRFS info (device loop2): turning off barriers [ 126.196464][ T5665] BTRFS info (device loop2): doing ref verification [ 126.249873][ T5665] BTRFS info (device loop2): enabling disk space caching [ 126.280893][ T5665] BTRFS info (device loop2): disk space caching is enabled [ 126.338445][ T5698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 126.668786][ T5708] loop4: detected capacity change from 0 to 32768 [ 126.865761][ T5708] XFS (loop4): Mounting V5 Filesystem [ 126.928985][ T5665] BTRFS info (device loop2): enabling ssd optimizations [ 126.973460][ T5708] XFS (loop4): Ending clean mount [ 126.997080][ T5708] XFS (loop4): Quotacheck needed: Please wait. [ 127.010333][ T5665] BTRFS info (device loop2): rebuilding free space tree [ 127.095692][ T5708] XFS (loop4): Quotacheck: Done. [ 127.156214][ T5708] tmpfs: Unknown parameter 'usrquota' [ 127.400839][ T5665] BTRFS info (device loop2): disabling free space tree [ 127.538420][ T5665] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.572999][ T5665] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.099541][ T4267] XFS (loop4): Unmounting Filesystem [ 128.307807][ T4276] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 128.829951][ T5756] dlm: no local IP address has been set [ 128.836190][ T5756] dlm: cannot start dlm midcomms -107 [ 129.023603][ T5765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.578'. [ 129.097195][ T5767] loop4: detected capacity change from 0 to 1024 [ 129.209001][ T5767] hfsplus: unable to find HFS+ superblock [ 129.539553][ T5751] loop1: detected capacity change from 0 to 32768 [ 129.567357][ T5751] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.574 (5751) [ 129.655333][ T5751] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.705578][ T5751] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 129.742101][ T5751] BTRFS info (device loop1): setting nodatasum [ 129.767336][ T5751] BTRFS info (device loop1): force zlib compression, level 3 [ 129.805888][ T5751] BTRFS info (device loop1): enabling ssd optimizations [ 129.819957][ T5751] BTRFS info (device loop1): allowing degraded mounts [ 129.827090][ T5751] BTRFS info (device loop1): using free space tree [ 129.855576][ T5777] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 132.597647][ T4266] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.933248][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940101][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.886052][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 133.986684][ T5818] syz.3.589 (5818) used greatest stack depth: 18176 bytes left [ 134.422539][ T5833] loop2: detected capacity change from 0 to 512 [ 134.429851][ T5833] EXT4-fs: Ignoring removed bh option [ 134.583144][ T5833] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 135.435591][ T5827] sched: RT throttling activated [ 135.773779][ T5833] EXT4-fs (loop2): 1 truncate cleaned up [ 135.780468][ T5833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.118089][ T5849] loop4: detected capacity change from 0 to 1024 [ 136.123574][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 136.956847][ T5849] hfsplus: bad catalog entry type [ 137.310066][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 137.324537][ T11] hfsplus: b-tree write err: -5, ino 4 [ 137.560261][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.568198][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.602385][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.612220][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.620758][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.628576][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.636311][ T5870] tipc: Enabled bearer , priority 10 [ 137.666369][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.682373][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.705600][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.724503][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.746754][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.769433][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.789729][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.812091][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.830921][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.850933][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.864069][ T22] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 137.905767][ T22] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 137.984429][ T5883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 138.739903][ T5814] tipc: Node number set to 903712296 [ 138.994578][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 139.399893][ T5904] fido_id[5904]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.584317][ T5927] ubi31: attaching mtd0 [ 140.590842][ T5927] ubi31: scanning is finished [ 140.595597][ T5927] ubi31: empty MTD device detected [ 140.823806][ T5925] loop6: detected capacity change from 0 to 524287999 [ 142.931311][ T126] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 142.951964][ T5927] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 142.957175][ T5925] loop6: unable to read partition table [ 142.966734][ T5925] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 143.758388][ T5938] loop1: detected capacity change from 0 to 1024 [ 143.797690][ T5940] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 143.833603][ T5938] EXT4-fs: Ignoring removed orlov option [ 143.878484][ T5938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.990079][ T27] audit: type=1800 audit(1753439353.134:2): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.629" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 144.126291][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 144.290002][ T126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.389139][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 144.500138][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 144.516033][ T126] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.567700][ T126] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.699746][ T126] usb 3-1: config 0 interface 0 has no altsetting 0 [ 144.728537][ T126] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 144.740260][ T5956] loop0: detected capacity change from 0 to 2048 [ 144.820001][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.873266][ T126] usb 3-1: config 0 descriptor?? [ 144.920914][ T5956] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.635: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 144.972048][ T5956] EXT4-fs (loop0): Remounting filesystem read-only [ 144.986073][ T5956] EXT4-fs (loop0): get root inode failed [ 145.031112][ T5956] EXT4-fs (loop0): mount failed [ 145.321949][ T126] a4tech 0003:09DA:000A.0002: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.2-1/input0 [ 145.475755][ T5976] loop1: detected capacity change from 0 to 2048 [ 146.196320][ T126] usb 3-1: USB disconnect, device number 3 [ 146.264141][ T5976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.638253][ T5982] fido_id[5982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.519919][ T5933] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.669192][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 148.729890][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 148.737012][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.768818][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.799477][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.804969][ T5981] loop4: detected capacity change from 0 to 32768 [ 148.829867][ T5933] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.849230][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.878406][ T5981] ======================================================= [ 148.878406][ T5981] WARNING: The mand mount option has been deprecated and [ 148.878406][ T5981] and is ignored by this kernel. Remove the mand [ 148.878406][ T5981] option from the mount to silence this warning. [ 148.878406][ T5981] ======================================================= [ 148.886967][ T5933] usb 3-1: config 0 descriptor?? [ 149.889977][ T5981] (syz.4.646,5981,1):ocfs2_initialize_super:2286 ERROR: status = -12 [ 149.905905][ T5933] HID 045e:07da: Invalid code 65791 type 1 [ 149.977442][ T5981] (syz.4.646,5981,1):ocfs2_fill_super:1176 ERROR: status = -12 [ 150.025781][ T5933] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input18 [ 150.105630][ T5994] loop2: detected capacity change from 0 to 128 [ 150.144821][ T5933] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 150.421847][ T5933] usb 3-1: USB disconnect, device number 4 [ 150.700738][ T6014] loop4: detected capacity change from 0 to 4096 [ 150.702597][ T6012] fido_id[6012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.770435][ T6014] ntfs3: Unknown parameter 'windows_names' [ 154.182670][ T6029] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 154.311268][ T6033] loop3: detected capacity change from 0 to 1024 [ 155.755830][ T27] audit: type=1800 audit(1753439364.904:3): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.665" name="file2" dev="loop3" ino=26 res=0 errno=0 [ 155.857623][ T4454] hfsplus: b-tree write err: -5, ino 4 [ 155.919992][ T6030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.033803][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 157.516492][ T6069] tipc: Enabled bearer , priority 0 [ 157.538403][ T6069] device syzkaller0 entered promiscuous mode [ 157.631951][ T6071] tipc: Resetting bearer [ 157.692677][ T6065] tipc: Resetting bearer [ 157.728700][ T6065] tipc: Disabling bearer [ 158.048855][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 158.646927][ T6105] tipc: Enabled bearer , priority 0 [ 158.667305][ T6105] device syzkaller0 entered promiscuous mode [ 158.810996][ T6105] tipc: Resetting bearer [ 158.819400][ T6103] tipc: Resetting bearer [ 158.917022][ T6103] tipc: Disabling bearer [ 159.136631][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 159.461859][ T6119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.504307][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.524851][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.539222][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.726081][ T6119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.914754][ T6119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.054709][ T6119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.222357][ T6144] tipc: Enabled bearer , priority 0 [ 160.241426][ T6144] device syzkaller0 entered promiscuous mode [ 160.330232][ T6144] tipc: Resetting bearer [ 160.376893][ T6119] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.411829][ T6139] tipc: Resetting bearer [ 160.460948][ T6139] tipc: Disabling bearer [ 160.500789][ T6119] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.568205][ T6119] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.597154][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 160.643390][ T6119] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.934374][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.954603][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.010209][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.632193][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 161.728402][ T6189] tipc: Enabled bearer , priority 0 [ 161.754193][ T6189] device syzkaller0 entered promiscuous mode [ 161.810607][ T6189] tipc: Resetting bearer [ 161.834320][ T6188] tipc: Resetting bearer [ 161.904023][ T6188] tipc: Disabling bearer [ 162.390897][ T6199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.578714][ T6199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.708754][ T6199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.888805][ T6199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.158904][ T6231] tipc: Started in network mode [ 163.185574][ T6231] tipc: Node identity 42230395543c, cluster identity 4711 [ 163.195918][ T6233] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 163.207021][ T6231] tipc: Enabled bearer , priority 0 [ 163.248777][ T6199] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.271093][ T6235] device syzkaller0 entered promiscuous mode [ 163.300302][ T6231] tipc: Resetting bearer [ 163.352193][ T6199] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.390437][ T6230] tipc: Resetting bearer [ 163.442028][ T6230] tipc: Disabling bearer [ 163.467676][ T6199] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.515021][ T6199] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.205711][ T6269] tipc: Enabled bearer , priority 0 [ 164.226753][ T6269] device syzkaller0 entered promiscuous mode [ 164.288012][ T6269] tipc: Resetting bearer [ 164.319570][ T6267] tipc: Resetting bearer [ 164.398902][ T6267] tipc: Disabling bearer [ 164.529565][ T6278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.737593][ T6278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.842443][ T6278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.979269][ T6278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.141450][ T6278] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.169600][ T6278] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.215902][ T6278] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.273475][ T6278] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.185910][ T6341] tipc: Enabled bearer , priority 0 [ 166.333022][ T6341] device syzkaller0 entered promiscuous mode [ 166.360731][ T6341] tipc: Resetting bearer [ 166.477251][ T6339] tipc: Resetting bearer [ 168.666032][ T6339] tipc: Disabling bearer [ 169.166898][ T6381] tipc: Enabled bearer , priority 0 [ 169.195965][ T6381] device syzkaller0 entered promiscuous mode [ 169.249622][ T6381] tipc: Resetting bearer [ 169.286234][ T6379] tipc: Resetting bearer [ 169.350080][ T6379] tipc: Disabling bearer [ 170.105450][ T6422] tipc: Started in network mode [ 170.129879][ T6422] tipc: Node identity 1a8df5f4ba6a, cluster identity 4711 [ 170.137190][ T6422] tipc: Enabled bearer , priority 0 [ 170.177899][ T6423] device syzkaller0 entered promiscuous mode [ 170.237088][ T6422] tipc: Resetting bearer [ 170.264960][ T6419] tipc: Resetting bearer [ 170.293805][ T6419] tipc: Disabling bearer [ 171.702226][ T6487] tipc: Enabled bearer , priority 0 [ 171.726055][ T6487] device syzkaller0 entered promiscuous mode [ 171.755882][ T6487] tipc: Resetting bearer [ 171.785170][ T6486] tipc: Resetting bearer [ 171.831878][ T6486] tipc: Disabling bearer [ 172.471884][ T6519] tipc: Enabled bearer , priority 0 [ 172.493449][ T6514] tipc: Disabling bearer [ 172.673544][ T6526] tipc: Enabled bearer , priority 0 [ 172.720759][ T6526] device syzkaller0 entered promiscuous mode [ 172.767176][ T6526] tipc: Resetting bearer [ 172.798251][ T6525] tipc: Resetting bearer [ 172.871576][ T6525] tipc: Disabling bearer [ 172.889666][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.896'. [ 173.371586][ T6554] tipc: Enabled bearer , priority 0 [ 173.410598][ T6553] tipc: Disabling bearer [ 173.603112][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'. [ 173.643291][ T6565] tipc: Enabled bearer , priority 0 [ 173.661549][ T6565] device syzkaller0 entered promiscuous mode [ 173.717774][ T6565] tipc: Resetting bearer [ 173.758296][ T6563] tipc: Resetting bearer [ 173.816495][ T6563] tipc: Disabling bearer [ 174.257242][ T6589] tipc: Enabled bearer , priority 0 [ 174.270466][ T6587] tipc: Disabling bearer [ 175.418099][ T6604] tipc: Enabled bearer , priority 0 [ 175.425072][ T6607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.928'. [ 175.441206][ T6604] device syzkaller0 entered promiscuous mode [ 175.475384][ T6604] tipc: Resetting bearer [ 175.494945][ T6599] tipc: Resetting bearer [ 175.587863][ T6599] tipc: Disabling bearer [ 176.076871][ T6627] device syzkaller0 entered promiscuous mode [ 176.376622][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.948'. [ 178.402683][ T6652] tipc: Enabled bearer , priority 0 [ 178.422145][ T6652] device syzkaller0 entered promiscuous mode [ 178.468986][ T6652] tipc: Resetting bearer [ 178.503986][ T6650] tipc: Resetting bearer [ 178.574147][ T6650] tipc: Disabling bearer [ 179.115346][ T6675] device syzkaller0 entered promiscuous mode [ 179.272355][ T6689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.970'. [ 181.319983][ T6698] tipc: Enabling of bearer rejected, failed to enable media [ 182.012197][ T6735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.985'. [ 182.251568][ T6737] device syzkaller0 entered promiscuous mode [ 182.299275][ T6749] tipc: Enabled bearer , priority 0 [ 184.244915][ T6743] device syzkaller0 entered promiscuous mode [ 184.270610][ T6759] tipc: Resetting bearer [ 184.495466][ T6739] tipc: Resetting bearer [ 184.544387][ T6739] tipc: Disabling bearer [ 185.137619][ T6787] device syzkaller0 entered promiscuous mode [ 187.437685][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 187.493070][ T6812] tipc: Enabling of bearer rejected, failed to enable media [ 187.758109][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.767938][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.782852][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.799323][ T6826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.230930][ T6848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1027'. [ 188.374290][ T6850] device syzkaller0 entered promiscuous mode [ 188.391602][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 188.419960][ T6855] tipc: Enabled bearer , priority 0 [ 190.529117][ T6855] device syzkaller0 entered promiscuous mode [ 190.580588][ T6853] tipc: Resetting bearer [ 190.659656][ T6853] tipc: Disabling bearer [ 190.744232][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.757310][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.765292][ T6878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.805247][ T6878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.026499][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 191.181207][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 191.481608][ T6902] device syzkaller0 entered promiscuous mode [ 193.754557][ T6915] tipc: Enabling of bearer rejected, failed to enable media [ 194.210700][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1060'. [ 194.258896][ T6955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1063'. [ 194.374267][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380730][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.594305][ T6967] tipc: Enabled bearer , priority 0 [ 194.638595][ T6967] device syzkaller0 entered promiscuous mode [ 194.734747][ T6966] tipc: Resetting bearer [ 194.780466][ T6966] tipc: Disabling bearer [ 195.090097][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1077'. [ 195.195408][ T6991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1080'. [ 195.522690][ T7005] tipc: Enabled bearer , priority 0 [ 195.540539][ T7005] device syzkaller0 entered promiscuous mode [ 195.614026][ T7004] tipc: Resetting bearer [ 195.719182][ T7004] tipc: Disabling bearer [ 195.938622][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1094'. [ 196.616918][ T7045] tipc: Enabled bearer , priority 0 [ 196.634504][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1108'. [ 196.648787][ T7045] device syzkaller0 entered promiscuous mode [ 196.729603][ T7044] tipc: Resetting bearer [ 196.826585][ T7044] tipc: Disabling bearer [ 197.321983][ T7072] tipc: Enabled bearer , priority 0 [ 197.350764][ T7071] tipc: Disabling bearer [ 197.503434][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1122'. [ 197.825165][ T7096] tipc: Enabled bearer , priority 0 [ 197.860403][ T7096] device syzkaller0 entered promiscuous mode [ 197.985564][ T7096] tipc: Resetting bearer [ 198.016490][ T7093] tipc: Resetting bearer [ 198.090804][ T7093] tipc: Disabling bearer [ 198.328061][ T7116] tipc: Enabled bearer , priority 0 [ 198.351699][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1137'. [ 198.363624][ T7114] tipc: Disabling bearer [ 198.597406][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 198.975897][ T7139] tipc: Enabled bearer , priority 0 [ 199.025273][ T7139] tipc: Resetting bearer [ 199.125077][ T7137] tipc: Disabling bearer [ 199.182209][ T7148] tipc: Enabled bearer , priority 0 [ 199.196427][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1152'. [ 199.208658][ T7147] tipc: Disabling bearer [ 199.377870][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1156'. [ 200.028223][ T7179] tipc: Enabled bearer , priority 0 [ 200.060474][ T7182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1167'. [ 200.082435][ T7179] tipc: Resetting bearer [ 200.148322][ T7178] tipc: Disabling bearer [ 200.158683][ T7186] tipc: Enabled bearer , priority 0 [ 200.207566][ T7184] tipc: Disabling bearer [ 200.407780][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 201.010062][ T7221] tipc: Enabled bearer , priority 0 [ 201.047312][ T7221] tipc: Resetting bearer [ 201.095284][ T7224] tipc: Enabled bearer , priority 0 [ 201.157732][ T7219] tipc: Disabling bearer [ 201.172174][ T7223] tipc: Disabling bearer [ 201.355707][ T7236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 201.570224][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 201.576334][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.582609][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 201.582664][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 201.685821][ T7250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1198'. [ 201.960722][ T7262] device syzkaller0 entered promiscuous mode [ 201.985293][ T7264] tipc: Enabled bearer , priority 0 [ 201.999357][ T7263] tipc: Disabling bearer [ 202.507799][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1212'. [ 202.598018][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1215'. [ 202.894296][ T7298] tipc: Enabling of bearer rejected, failed to enable media [ 203.007690][ T7304] device syzkaller0 entered promiscuous mode [ 203.457756][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1229'. [ 203.471223][ T7325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1230'. [ 203.621528][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1232'. [ 204.066338][ T7349] tipc: Enabling of bearer rejected, failed to enable media [ 204.094119][ T7347] device syzkaller0 entered promiscuous mode [ 204.404508][ T7363] __nla_validate_parse: 1 callbacks suppressed [ 204.404525][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'. [ 204.684239][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 205.018586][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 205.223856][ T7396] tipc: Enabling of bearer rejected, failed to enable media [ 205.235854][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1261'. [ 205.286655][ T7394] device syzkaller0 entered promiscuous mode [ 205.660377][ T7412] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input21 [ 205.789672][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 206.018512][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 206.176450][ T7434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1275'. [ 206.319609][ T7439] device syzkaller0 entered promiscuous mode [ 206.424465][ T7444] tipc: Enabling of bearer rejected, failed to enable media [ 206.904066][ T7462] device syzkaller0 entered promiscuous mode [ 206.937341][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1287'. [ 206.953248][ T7464] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input22 [ 207.400178][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1291'. [ 207.713195][ T7497] tipc: Enabling of bearer rejected, failed to enable media [ 208.004229][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 208.838899][ T7545] tipc: Enabling of bearer rejected, failed to enable media [ 209.964950][ T7588] __nla_validate_parse: 3 callbacks suppressed [ 209.964968][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1338'. [ 210.086367][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1340'. [ 210.137159][ T7597] tipc: Enabled bearer , priority 0 [ 210.288214][ T7597] device syzkaller0 entered promiscuous mode [ 210.297169][ T7597] tipc: Resetting bearer [ 210.509051][ T7596] tipc: Resetting bearer [ 211.223928][ T4343] tipc: Node number set to 371131285 [ 212.688228][ T7596] tipc: Disabling bearer [ 212.901945][ T7635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1354'. [ 212.930867][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1355'. [ 212.994476][ T7641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1356'. [ 213.221413][ T7648] tipc: Enabled bearer , priority 0 [ 213.270900][ T7648] tipc: Resetting bearer [ 213.376963][ T7647] tipc: Disabling bearer [ 213.462758][ T7656] tipc: Enabled bearer , priority 0 [ 213.603050][ T7656] device syzkaller0 entered promiscuous mode [ 213.609701][ T7656] tipc: Resetting bearer [ 213.710402][ T7655] tipc: Resetting bearer [ 213.725346][ T7668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1369'. [ 215.572516][ T7655] tipc: Disabling bearer [ 215.805903][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1372'. [ 216.098076][ T7692] tipc: Enabled bearer , priority 0 [ 216.151285][ T7692] tipc: Resetting bearer [ 216.223040][ T7690] tipc: Disabling bearer [ 216.486741][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1385'. [ 216.538292][ T7709] tipc: Enabled bearer , priority 0 [ 216.769341][ T7715] device syzkaller0 entered promiscuous mode [ 216.794975][ T7715] tipc: Resetting bearer [ 217.013293][ T4369] tipc: Resetting bearer [ 217.026378][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1390'. [ 217.036826][ T7707] tipc: Resetting bearer [ 217.604575][ T126] tipc: Node number set to 2699556340 [ 218.914283][ T7707] tipc: Disabling bearer [ 219.103897][ T7748] tipc: Enabled bearer , priority 0 [ 219.145056][ T7748] tipc: Resetting bearer [ 219.211292][ T7747] tipc: Disabling bearer [ 219.405995][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 219.546075][ T7766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'. [ 219.773905][ T7777] tipc: Enabled bearer , priority 0 [ 219.872568][ T7777] device syzkaller0 entered promiscuous mode [ 219.879446][ T7777] tipc: Resetting bearer [ 219.959033][ T7776] tipc: Resetting bearer [ 222.077899][ T7776] tipc: Disabling bearer [ 222.104724][ T7796] tipc: Enabling of bearer rejected, failed to enable media [ 222.311162][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1422'. [ 222.393716][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 222.430255][ T7819] bond0: invalid ARP target 0.0.0.0 specified for addition [ 222.449617][ T7819] bond0: option arp_ip_target: invalid value (0) [ 222.982096][ T7841] tipc: Enabled bearer , priority 0 [ 223.063902][ T7841] device syzkaller0 entered promiscuous mode [ 223.072789][ T7841] tipc: Resetting bearer [ 223.088099][ T7848] tipc: Enabled bearer , priority 0 [ 223.124680][ T7849] tipc: Resetting bearer [ 223.125600][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 223.140988][ T7840] tipc: Resetting bearer [ 223.557862][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 225.036110][ T7840] tipc: Disabling bearer [ 225.071577][ T7847] tipc: Disabling bearer [ 225.286662][ T7870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1443'. [ 225.336726][ T7870] bond0: invalid ARP target 0.0.0.0 specified for addition [ 225.353914][ T7870] bond0: option arp_ip_target: invalid value (0) [ 225.760992][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 225.912640][ T7898] tipc: Enabled bearer , priority 0 [ 225.985824][ T7898] device syzkaller0 entered promiscuous mode [ 225.992897][ T7898] tipc: Resetting bearer [ 226.000326][ T7900] tipc: Enabled bearer , priority 0 [ 226.012760][ T7900] tipc: Resetting bearer [ 226.041765][ T7899] tipc: Disabling bearer [ 226.061128][ T7897] tipc: Resetting bearer [ 228.164799][ T7897] tipc: Disabling bearer [ 228.179260][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1460'. [ 228.188767][ T7912] bond0: invalid ARP target 0.0.0.0 specified for addition [ 228.196167][ T7912] bond0: option arp_ip_target: invalid value (0) [ 228.448244][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 228.675724][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 228.936828][ T7959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1476'. [ 228.987859][ T7959] bond0: invalid ARP target 0.0.0.0 specified for addition [ 229.016815][ T7959] bond0: option arp_ip_target: invalid value (0) [ 229.041524][ T7964] tipc: Enabling of bearer rejected, failed to enable media [ 229.325757][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 229.866291][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'. [ 230.172343][ T8007] tipc: Enabling of bearer rejected, failed to enable media [ 230.229140][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1490'. [ 230.238760][ T8008] bond0: invalid ARP target 0.0.0.0 specified for addition [ 230.247435][ T8008] bond0: option arp_ip_target: invalid value (0) [ 230.256088][ T8010] tipc: Enabling of bearer rejected, failed to enable media [ 230.924827][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'. [ 231.446650][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'. [ 231.463000][ T8057] bond0: invalid ARP target 0.0.0.0 specified for addition [ 231.484946][ T8057] bond0: option arp_ip_target: invalid value (0) [ 231.736171][ T8066] tipc: Enabling of bearer rejected, failed to enable media [ 231.776867][ T8071] tipc: Enabling of bearer rejected, failed to enable media [ 231.807892][ T8075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1516'. [ 232.524580][ T8101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1523'. [ 232.562269][ T8101] bond0: invalid ARP target 0.0.0.0 specified for addition [ 232.573620][ T8101] bond0: option arp_ip_target: invalid value (0) [ 233.236108][ T8130] tipc: Enabling of bearer rejected, failed to enable media [ 233.318372][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 233.375677][ T8139] __nla_validate_parse: 2 callbacks suppressed [ 233.375695][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1537'. [ 233.420037][ T8139] bond0: invalid ARP target 0.0.0.0 specified for addition [ 233.471620][ T8139] bond0: option arp_ip_target: invalid value (0) [ 233.840114][ T8156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1541'. [ 234.087719][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 234.651456][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1553'. [ 234.673697][ T8187] bond0: invalid ARP target 0.0.0.0 specified for addition [ 234.683818][ T8187] bond0: option arp_ip_target: invalid value (0) [ 234.836943][ T8192] tipc: Enabling of bearer rejected, failed to enable media [ 234.931138][ T8198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1557'. [ 234.989376][ T8203] tipc: Enabling of bearer rejected, failed to enable media [ 235.017193][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 235.309535][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'. [ 235.908182][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1568'. [ 235.946355][ T8237] bond0: invalid ARP target 0.0.0.0 specified for addition [ 235.980370][ T8237] bond0: option arp_ip_target: invalid value (0) [ 236.049531][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 236.182658][ T8245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1572'. [ 236.225299][ T8247] tipc: Enabling of bearer rejected, failed to enable media [ 236.591402][ T8263] tipc: Enabling of bearer rejected, failed to enable media [ 237.243369][ T8286] bond0: invalid ARP target 0.0.0.0 specified for addition [ 237.255663][ T8286] bond0: option arp_ip_target: invalid value (0) [ 237.794962][ T8307] tipc: Enabled bearer , priority 0 [ 237.852339][ T8305] tipc: Disabling bearer [ 237.996073][ T8316] tipc: Enabling of bearer rejected, failed to enable media [ 238.397696][ T8335] __nla_validate_parse: 7 callbacks suppressed [ 238.397713][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 238.432217][ T8335] bond0: invalid ARP target 0.0.0.0 specified for addition [ 238.449884][ T8335] bond0: option arp_ip_target: invalid value (0) [ 238.636490][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 238.875025][ T8355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 239.121965][ T8360] tipc: Enabled bearer , priority 0 [ 239.140298][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1615'. [ 239.164153][ T8359] tipc: Disabling bearer [ 239.326901][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1617'. [ 239.359824][ T8368] bond0: invalid ARP target 0.0.0.0 specified for addition [ 239.367116][ T8368] bond0: option arp_ip_target: invalid value (0) [ 239.376156][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 239.598485][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 239.986958][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 240.232405][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1629'. [ 240.273109][ T8406] tipc: Enabled bearer , priority 0 [ 240.292105][ T8411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1632'. [ 240.313849][ T8411] bond0: invalid ARP target 0.0.0.0 specified for addition [ 240.330067][ T8411] bond0: option arp_ip_target: invalid value (0) [ 240.372154][ T8405] tipc: Disabling bearer [ 240.654284][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1636'. [ 240.868034][ T8429] tipc: Enabling of bearer rejected, failed to enable media [ 241.555161][ T8461] bond0: invalid ARP target 0.0.0.0 specified for addition [ 241.587475][ T8461] bond0: option arp_ip_target: invalid value (0) [ 241.916320][ T8466] device syzkaller0 entered promiscuous mode [ 244.197115][ T8499] __nla_validate_parse: 5 callbacks suppressed [ 244.197133][ T8499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1660'. [ 244.252032][ T8499] bond0: invalid ARP target 0.0.0.0 specified for addition [ 244.280854][ T8499] bond0: option arp_ip_target: invalid value (0) [ 244.315262][ T8505] tipc: Enabling of bearer rejected, failed to enable media [ 244.528994][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 245.401833][ T8549] device syzkaller0 entered promiscuous mode [ 247.332942][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1677'. [ 247.342075][ T8555] bond0: invalid ARP target 0.0.0.0 specified for addition [ 247.349309][ T8555] bond0: option arp_ip_target: invalid value (0) [ 247.490667][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 247.679089][ T8569] tipc: Enabling of bearer rejected, failed to enable media [ 248.287126][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1690'. [ 248.305017][ T8596] bond0: invalid ARP target 0.0.0.0 specified for addition [ 248.327765][ T8596] bond0: option arp_ip_target: invalid value (0) [ 248.598927][ T8600] device syzkaller0 entered promiscuous mode [ 248.668756][ T8598] loop4: detected capacity change from 0 to 32768 [ 248.677322][ T8598] XFS: ikeep mount option is deprecated. [ 248.804150][ T8598] XFS (loop4): Mounting V5 Filesystem [ 248.933244][ T8598] XFS (loop4): Ending clean mount [ 248.941384][ T8598] XFS (loop4): Quotacheck needed: Please wait. [ 249.001808][ T8598] XFS (loop4): Quotacheck: Done. [ 249.027829][ T27] audit: type=1326 audit(1753439458.174:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.136289][ T4267] XFS (loop4): Unmounting Filesystem [ 249.145428][ T27] audit: type=1326 audit(1753439458.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.184840][ T27] audit: type=1326 audit(1753439458.174:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.257995][ T27] audit: type=1326 audit(1753439458.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.330927][ T27] audit: type=1326 audit(1753439458.204:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.409012][ T27] audit: type=1326 audit(1753439458.204:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.432471][ T27] audit: type=1326 audit(1753439458.204:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.456696][ T27] audit: type=1326 audit(1753439458.204:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.498968][ T27] audit: type=1326 audit(1753439458.204:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 249.527018][ T27] audit: type=1326 audit(1753439458.204:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.4.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7735f8e9a9 code=0x7ffc0000 [ 251.197080][ T8625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1697'. [ 251.557220][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 251.676431][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1704'. [ 251.721610][ T8640] bond0: invalid ARP target 0.0.0.0 specified for addition [ 251.731094][ T8640] bond0: option arp_ip_target: invalid value (0) [ 251.744369][ T8645] tipc: Enabling of bearer rejected, failed to enable media [ 251.946040][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 252.393580][ T8663] loop1: detected capacity change from 0 to 32768 [ 252.402141][ T8663] XFS: ikeep mount option is deprecated. [ 252.448039][ T8663] XFS (loop1): Mounting V5 Filesystem [ 252.488058][ T8661] device syzkaller0 entered promiscuous mode [ 252.650099][ T8663] XFS (loop1): Ending clean mount [ 252.657544][ T8663] XFS (loop1): Quotacheck needed: Please wait. [ 252.698957][ T8663] XFS (loop1): Quotacheck: Done. [ 252.842971][ T4266] XFS (loop1): Unmounting Filesystem [ 252.914193][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 254.959969][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'. [ 254.969002][ T8699] bond0: invalid ARP target 0.0.0.0 specified for addition [ 254.989911][ T8699] bond0: option arp_ip_target: invalid value (0) [ 255.213298][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'. [ 255.797152][ T8720] loop2: detected capacity change from 0 to 32768 [ 255.804876][ T8720] XFS: ikeep mount option is deprecated. [ 255.813197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813293][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.887902][ T8720] XFS (loop2): Mounting V5 Filesystem [ 255.935023][ T8734] tipc: Enabled bearer , priority 0 [ 255.966395][ T8720] XFS (loop2): Ending clean mount [ 255.982549][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'. [ 255.985650][ T8720] XFS (loop2): Quotacheck needed: Please wait. [ 256.013364][ T8734] tipc: Resetting bearer [ 256.050225][ T8720] XFS (loop2): Quotacheck: Done. [ 256.076295][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 256.076320][ T27] audit: type=1326 audit(1753439465.224:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.142829][ T8733] tipc: Disabling bearer [ 256.193274][ T4276] XFS (loop2): Unmounting Filesystem [ 256.253867][ T27] audit: type=1326 audit(1753439465.224:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.369911][ T27] audit: type=1326 audit(1753439465.224:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.432816][ T27] audit: type=1326 audit(1753439465.224:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.504404][ T27] audit: type=1326 audit(1753439465.224:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.610388][ T27] audit: type=1326 audit(1753439465.264:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.717432][ T27] audit: type=1326 audit(1753439465.264:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.809927][ T27] audit: type=1326 audit(1753439465.264:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.853248][ T8743] device syzkaller0 entered promiscuous mode [ 256.875543][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 256.884888][ T27] audit: type=1326 audit(1753439465.264:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.943175][ T8756] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'. [ 256.958215][ T27] audit: type=1326 audit(1753439465.264:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8719 comm="syz.2.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6418b8e9a9 code=0x7ffc0000 [ 256.970071][ T8756] bond0: invalid ARP target 0.0.0.0 specified for addition [ 257.036707][ T8756] bond0: option arp_ip_target: invalid value (0) [ 257.732973][ T8778] loop3: detected capacity change from 0 to 32768 [ 257.742359][ T8778] XFS: ikeep mount option is deprecated. [ 257.816660][ T8778] XFS (loop3): Mounting V5 Filesystem [ 257.883255][ T8778] XFS (loop3): Ending clean mount [ 257.890482][ T8778] XFS (loop3): Quotacheck needed: Please wait. [ 257.936659][ T8778] XFS (loop3): Quotacheck: Done. [ 258.011227][ T4274] XFS (loop3): Unmounting Filesystem [ 259.800277][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1749'. [ 259.827644][ T8787] bridge8: port 1(veth0_to_bond) entered blocking state [ 259.883099][ T8787] bridge8: port 1(veth0_to_bond) entered disabled state [ 259.917814][ T8787] device veth0_to_bond entered promiscuous mode [ 259.952372][ T8790] bridge8: port 2(vlan2) entered blocking state [ 260.005559][ T8790] bridge8: port 2(vlan2) entered disabled state [ 260.016808][ T8790] device vlan2 entered promiscuous mode [ 260.030026][ T8790] device veth1 entered promiscuous mode [ 260.052884][ T8793] tipc: Enabling of bearer rejected, failed to enable media [ 260.074189][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1753'. [ 260.096657][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1754'. [ 260.384265][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 260.418879][ T8821] bond0: invalid ARP target 0.0.0.0 specified for addition [ 260.447041][ T8821] bond0: option arp_ip_target: invalid value (0) [ 260.701528][ T8831] device syzkaller0 entered promiscuous mode [ 261.058445][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 263.045972][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'. [ 263.107005][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1773'. [ 263.116654][ T8862] bond0: invalid ARP target 0.0.0.0 specified for addition [ 263.136643][ T8862] bond0: option arp_ip_target: invalid value (0) [ 263.160072][ T8865] tipc: Enabled bearer , priority 0 [ 263.196961][ T8859] tipc: Resetting bearer [ 263.297921][ T8857] tipc: Disabling bearer [ 263.611319][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 263.895974][ T8892] device syzkaller0 entered promiscuous mode [ 263.942174][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1787'. [ 266.228024][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1789'. [ 266.237347][ T8905] bond0: invalid ARP target 0.0.0.0 specified for addition [ 266.244952][ T8905] bond0: option arp_ip_target: invalid value (0) [ 266.515995][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 266.598169][ T8935] bridge9: port 1(veth0_to_bond) entered blocking state [ 266.640120][ T8935] bridge9: port 1(veth0_to_bond) entered disabled state [ 266.671192][ T8935] device veth0_to_bond entered promiscuous mode [ 266.698428][ T8941] bridge9: port 2(vlan2) entered blocking state [ 266.758499][ T8941] bridge9: port 2(vlan2) entered disabled state [ 266.782344][ T8941] device vlan2 entered promiscuous mode [ 266.815032][ T8941] device veth1 entered promiscuous mode [ 266.836946][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 266.924072][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1805'. [ 267.069937][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1806'. [ 267.178650][ T8961] device syzkaller0 entered promiscuous mode [ 267.303524][ T8962] device syzkaller0 entered promiscuous mode [ 269.709528][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 269.821358][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 269.947162][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1824'. [ 270.431743][ T9020] device syzkaller0 entered promiscuous mode [ 270.438872][ T9027] device syzkaller0 entered promiscuous mode [ 270.451475][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 270.465569][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1834'. [ 272.415862][ T9028] bridge7: port 1(veth0_to_bond) entered blocking state [ 272.429928][ T9028] bridge7: port 1(veth0_to_bond) entered disabled state [ 272.438613][ T9028] device veth0_to_bond entered promiscuous mode [ 272.610891][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 272.905539][ T9051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1840'. [ 273.237775][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1847'. [ 273.297006][ T9063] bridge9: port 1(veth0_to_bond) entered blocking state [ 273.319948][ T9063] bridge9: port 1(veth0_to_bond) entered disabled state [ 273.329135][ T9063] device veth0_to_bond entered promiscuous mode [ 273.382033][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1848'. [ 273.442554][ T9066] device syzkaller0 entered promiscuous mode [ 273.454395][ T9069] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 273.477558][ T9071] device syzkaller0 entered promiscuous mode [ 274.064596][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 275.792459][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1855'. [ 276.085380][ T9104] device veth0_to_bond left promiscuous mode [ 276.150850][ T9104] bridge2: port 1(veth0_to_bond) entered disabled state [ 276.228620][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1862'. [ 276.315158][ T9112] device syzkaller0 entered promiscuous mode [ 278.433683][ T9114] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 278.467716][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1870'. [ 278.821953][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 278.848499][ T9152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1876'. [ 278.978095][ T9156] device veth0_to_bond left promiscuous mode [ 278.995496][ T9156] bridge9: port 1(veth0_to_bond) entered disabled state [ 279.023913][ T9156] bridge11: port 1(veth0_to_bond) entered blocking state [ 279.040577][ T9156] bridge11: port 1(veth0_to_bond) entered disabled state [ 279.092429][ T9156] device veth0_to_bond entered promiscuous mode [ 279.181529][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 279.233602][ T9167] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 279.359479][ T9169] device syzkaller0 entered promiscuous mode [ 281.757024][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1885'. [ 282.032248][ T9208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'. [ 282.087415][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 282.137760][ T9213] device veth0_to_bond left promiscuous mode [ 282.170103][ T9213] bridge9: port 1(veth0_to_bond) entered disabled state [ 282.201710][ T9213] bridge10: port 1(veth0_to_bond) entered blocking state [ 282.215765][ T9213] bridge10: port 1(veth0_to_bond) entered disabled state [ 282.227063][ T9213] device veth0_to_bond entered promiscuous mode [ 282.245020][ T9217] device veth0_to_bond left promiscuous mode [ 282.259972][ T9217] bridge7: port 1(veth0_to_bond) entered disabled state [ 282.288802][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 282.632479][ T9236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1903'. [ 282.661672][ T9236] bond0: invalid ARP target 0.0.0.0 specified for addition [ 282.695317][ T9236] bond0: option arp_ip_target: invalid value (0) [ 282.752125][ T9238] device syzkaller0 entered promiscuous mode [ 282.787854][ T9242] device syzkaller0 entered promiscuous mode [ 282.818262][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1907'. [ 283.277390][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1909'. [ 284.996372][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 285.062159][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 285.130545][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'. [ 285.151862][ T9264] netlink: 'syz.4.1915': attribute type 6 has an invalid length. [ 285.176385][ T9267] netlink: 'syz.4.1915': attribute type 6 has an invalid length. [ 285.194139][ T9262] device veth0_to_bond left promiscuous mode [ 285.222339][ T9262] bridge10: port 1(veth0_to_bond) entered disabled state [ 285.248180][ T9262] bridge11: port 1(veth0_to_bond) entered blocking state [ 285.267261][ T9262] bridge11: port 1(veth0_to_bond) entered disabled state [ 285.284994][ T9262] device veth0_to_bond entered promiscuous mode [ 285.361658][ T9273] bond0: invalid ARP target 0.0.0.0 specified for addition [ 285.380010][ T9273] bond0: option arp_ip_target: invalid value (0) [ 285.731124][ T9287] device syzkaller0 entered promiscuous mode [ 285.865078][ T9288] device syzkaller0 entered promiscuous mode [ 287.948328][ T9298] __nla_validate_parse: 4 callbacks suppressed [ 287.948344][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1928'. [ 287.974487][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1930'. [ 288.021845][ T9305] device veth0_to_bond left promiscuous mode [ 288.028027][ T9305] bridge11: port 1(veth0_to_bond) entered disabled state [ 288.089368][ T9305] bridge12: port 1(veth0_to_bond) entered blocking state [ 288.112495][ T9305] bridge12: port 1(veth0_to_bond) entered disabled state [ 288.138410][ T9305] device veth0_to_bond entered promiscuous mode [ 288.139687][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 288.154437][ T9308] netlink: 'syz.3.1931': attribute type 6 has an invalid length. [ 288.170211][ T9309] netlink: 'syz.3.1931': attribute type 6 has an invalid length. [ 288.185512][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1933'. [ 288.205168][ T9312] bond0: invalid ARP target 0.0.0.0 specified for addition [ 288.257969][ T9312] bond0: option arp_ip_target: invalid value (0) [ 288.487980][ T9327] device syzkaller0 entered promiscuous mode [ 288.629625][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1940'. [ 288.703658][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1942'. [ 288.916760][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1946'. [ 288.938656][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1943'. [ 288.963567][ T9340] bridge10: port 1(veth0_to_bond) entered blocking state [ 288.971061][ T9340] bridge10: port 1(veth0_to_bond) entered disabled state [ 288.979290][ T9340] device veth0_to_bond entered promiscuous mode [ 288.988063][ T9343] sch_tbf: burst 0 is lower than device bridge13 mtu (1514) ! [ 289.086198][ T9345] device syzkaller0 entered promiscuous mode [ 289.158133][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 291.138258][ T9349] netlink: 'syz.2.1947': attribute type 6 has an invalid length. [ 291.148949][ T9351] netlink: 'syz.2.1947': attribute type 6 has an invalid length. [ 291.157500][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1949'. [ 291.171854][ T9353] bond0: invalid ARP target 0.0.0.0 specified for addition [ 291.179351][ T9353] bond0: option arp_ip_target: invalid value (0) [ 291.614839][ T9371] device veth0_to_bond left promiscuous mode [ 291.636193][ T9371] bridge11: port 1(veth0_to_bond) entered disabled state [ 291.687938][ T9374] device syzkaller0 entered promiscuous mode [ 291.942923][ T9381] bridge13: port 1(veth0_to_bond) entered blocking state [ 291.970386][ T9381] bridge13: port 1(veth0_to_bond) entered disabled state [ 292.012155][ T9381] device veth0_to_bond entered promiscuous mode [ 293.585364][ T9418] __nla_validate_parse: 4 callbacks suppressed [ 293.585381][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'. [ 293.649170][ T9422] loop0: detected capacity change from 0 to 64 [ 293.921181][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1977'. [ 293.936564][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 294.008322][ T9431] device veth0_to_bond left promiscuous mode [ 294.032222][ T9431] bridge13: port 1(veth0_to_bond) entered disabled state [ 294.091696][ T9431] bridge14: port 1(veth0_to_bond) entered blocking state [ 294.187937][ T9431] bridge14: port 1(veth0_to_bond) entered disabled state [ 294.206522][ T9431] device veth0_to_bond entered promiscuous mode [ 294.549679][ T9451] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1988'. [ 295.535531][ T9462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 295.745732][ T9460] loop3: detected capacity change from 0 to 32768 [ 295.922890][ T9460] XFS (loop3): Mounting V5 Filesystem [ 295.986461][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 296.048237][ T9460] XFS (loop3): Ending clean mount [ 296.055280][ T9460] XFS (loop3): Quotacheck needed: Please wait. [ 296.120512][ T9460] XFS (loop3): Quotacheck: Done. [ 296.180297][ T9460] tmpfs: Unknown parameter 'usrquota' [ 296.326684][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 296.885047][ T9441] loop1: detected capacity change from 0 to 32768 [ 296.945947][ T9441] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1983 (9441) [ 297.044028][ T9441] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 297.083355][ T9441] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 297.145596][ T9441] BTRFS info (device loop1): force zlib compression, level 3 [ 297.166143][ T9441] BTRFS info (device loop1): force clearing of disk cache [ 297.183089][ T4274] XFS (loop3): Unmounting Filesystem [ 297.186087][ T9441] BTRFS info (device loop1): turning off barriers [ 297.208213][ T9441] BTRFS info (device loop1): doing ref verification [ 297.222813][ T9441] BTRFS info (device loop1): enabling disk space caching [ 297.237468][ T9441] BTRFS info (device loop1): disk space caching is enabled [ 297.547745][ T9441] BTRFS error (device loop1): open_ctree failed: -12 [ 297.670273][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 298.201142][ T4368] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 298.355085][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 298.392866][ T9535] device veth0_to_bond left promiscuous mode [ 298.403263][ T4368] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.413781][ T9535] bridge10: port 1(veth0_to_bond) entered disabled state [ 298.439963][ T4368] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.452116][ T9535] bridge11: port 1(veth0_to_bond) entered blocking state [ 298.460902][ T9535] bridge11: port 1(veth0_to_bond) entered disabled state [ 298.462025][ T4368] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 298.474423][ T9535] device veth0_to_bond entered promiscuous mode [ 298.498301][ T4368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 298.513233][ T4368] usb 2-1: SerialNumber: syz [ 298.515492][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2014'. [ 298.547732][ T9543] device veth0_to_bond left promiscuous mode [ 298.570307][ T9543] bridge12: port 1(veth0_to_bond) entered disabled state [ 298.735986][ T4368] usb 2-1: 0:2 : does not exist [ 298.751465][ T4368] usb 2-1: unit 5 not found! [ 298.821179][ T4368] usb 2-1: USB disconnect, device number 2 [ 299.121685][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.432306][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 299.478722][ T9566] sch_tbf: burst 0 is lower than device bridge14 mtu (1514) ! [ 299.534136][ T9568] device syzkaller0 entered promiscuous mode [ 299.608278][ T9546] loop3: detected capacity change from 0 to 32768 [ 299.673873][ T9546] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2016 (9546) [ 299.747605][ T9546] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 299.759441][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 299.772608][ T9546] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 299.830486][ T9576] device veth0_to_bond left promiscuous mode [ 299.833873][ T9546] BTRFS info (device loop3): force zlib compression, level 3 [ 299.864658][ T9576] bridge8: port 1(veth0_to_bond) entered disabled state [ 299.879950][ T9546] BTRFS info (device loop3): force clearing of disk cache [ 299.887151][ T9546] BTRFS info (device loop3): turning off barriers [ 299.905757][ T9546] BTRFS info (device loop3): doing ref verification [ 299.908085][ T9580] loop0: detected capacity change from 0 to 64 [ 299.921634][ T9546] BTRFS info (device loop3): enabling disk space caching [ 299.928708][ T9546] BTRFS info (device loop3): disk space caching is enabled [ 299.938551][ T9576] bridge15: port 1(veth0_to_bond) entered blocking state [ 299.963464][ T9576] bridge15: port 1(veth0_to_bond) entered disabled state [ 300.015550][ T9576] device veth0_to_bond entered promiscuous mode [ 300.224959][ T9546] BTRFS info (device loop3): enabling ssd optimizations [ 300.250472][ T9546] BTRFS info (device loop3): rebuilding free space tree [ 300.329783][ T9546] BTRFS info (device loop3): disabling free space tree [ 300.337049][ T9546] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 300.385438][ T9546] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 300.661024][ T4274] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 300.729471][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 300.755917][ T9614] sch_tbf: burst 0 is lower than device bridge12 mtu (1514) ! [ 300.870323][ T4335] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 301.066370][ T4335] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.095738][ T4335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.096553][ T9628] loop0: detected capacity change from 0 to 64 [ 301.126037][ T4335] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 301.153117][ T4335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 301.178430][ T4335] usb 3-1: SerialNumber: syz [ 301.278643][ T9630] loop1: detected capacity change from 0 to 512 [ 301.314273][ T9630] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 301.354241][ T9630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.383833][ T9630] EXT4-fs (loop1): 1 truncate cleaned up [ 301.426682][ T4335] usb 3-1: 0:2 : does not exist [ 301.449838][ T4335] usb 3-1: unit 5 not found! [ 301.468829][ T9630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 301.538544][ T4335] usb 3-1: USB disconnect, device number 5 [ 301.604793][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2045'. [ 301.615187][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 301.744161][ T9644] device veth0_to_bond left promiscuous mode [ 301.760545][ T9644] bridge15: port 1(veth0_to_bond) entered disabled state [ 301.831638][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.033392][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2052'. [ 302.093025][ T9657] sch_tbf: burst 0 is lower than device bridge16 mtu (1514) ! [ 302.118493][ T9659] loop2: detected capacity change from 0 to 64 [ 304.643819][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'. [ 304.743536][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 305.035721][ T9682] bridge13: port 1(veth0_to_bond) entered blocking state [ 305.200889][ T9682] bridge13: port 1(veth0_to_bond) entered disabled state [ 305.454164][ T9685] loop3: detected capacity change from 0 to 32768 [ 305.631721][ T9685] XFS (loop3): Mounting V5 Filesystem [ 305.774047][ T9682] device veth0_to_bond entered promiscuous mode [ 306.015025][ T9685] XFS (loop3): Ending clean mount [ 306.032800][ T9685] XFS (loop3): Quotacheck needed: Please wait. [ 306.314995][ T9685] XFS (loop3): Quotacheck: Done. [ 306.324240][ T9685] tmpfs: Unknown parameter 'usrquota' [ 306.981505][ T4274] XFS (loop3): Unmounting Filesystem [ 307.230488][ T9706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2067'. [ 307.409975][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 307.632412][ T5759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.692832][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.935579][ T9719] dlm: no local IP address has been set [ 307.945582][ T9719] dlm: cannot start dlm midcomms -107 [ 308.096898][ T5759] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.189899][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 308.198068][ T5759] usb 2-1: SerialNumber: syz [ 308.448919][ T5759] usb 2-1: 0:2 : does not exist [ 308.467066][ T5759] usb 2-1: unit 5 not found! [ 308.509343][ T5759] usb 2-1: USB disconnect, device number 3 [ 308.762298][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.803956][ T9761] device veth0_to_bond left promiscuous mode [ 312.811482][ T9761] bridge11: port 1(veth0_to_bond) entered disabled state [ 312.875871][ T9763] loop4: detected capacity change from 0 to 1024 [ 312.946826][ T9763] hfsplus: bad catalog entry type [ 313.080406][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 314.976541][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2103'. [ 315.372800][ T9815] loop4: detected capacity change from 0 to 1024 [ 315.477860][ T9817] device syzkaller0 entered promiscuous mode [ 315.598733][ T4352] hfsplus: b-tree write err: -5, ino 4 [ 316.684602][ T9799] loop1: detected capacity change from 0 to 32768 [ 316.713566][ T9799] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2102 (9799) [ 316.775830][ T9799] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 316.829879][ T9799] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 316.879822][ T9799] BTRFS info (device loop1): force zlib compression, level 3 [ 316.903068][ T9799] BTRFS info (device loop1): force clearing of disk cache [ 316.930400][ T9799] BTRFS info (device loop1): turning off barriers [ 316.972672][ T9799] BTRFS info (device loop1): doing ref verification [ 316.993818][ T9799] BTRFS info (device loop1): enabling disk space caching [ 317.089866][ T9799] BTRFS info (device loop1): disk space caching is enabled [ 317.886337][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.900397][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.943630][ T9799] BTRFS error (device loop1): open_ctree failed: -12 [ 318.189420][ T4390] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by udevd (4390) [ 318.380541][ T9869] loop2: detected capacity change from 0 to 32768 [ 318.508614][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'. [ 318.535038][ T9869] XFS (loop2): Mounting V5 Filesystem [ 318.584774][ T9880] device veth0_to_bond left promiscuous mode [ 318.620220][ T9880] bridge13: port 1(veth0_to_bond) entered disabled state [ 318.771611][ T9869] XFS (loop2): Ending clean mount [ 318.781069][ T9869] XFS (loop2): Quotacheck needed: Please wait. [ 318.888876][ T9869] XFS (loop2): Quotacheck: Done. [ 318.898142][ T9869] tmpfs: Unknown parameter 'usrquota' [ 318.970983][ T9892] device syzkaller0 entered promiscuous mode [ 319.562207][ T9893] loop1: detected capacity change from 0 to 1024 [ 319.814591][ T4466] hfsplus: b-tree write err: -5, ino 4 [ 320.117539][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 320.282360][ T4276] XFS (loop2): Unmounting Filesystem [ 320.380845][ T9910] device syzkaller0 entered promiscuous mode [ 322.882778][ T9939] loop3: detected capacity change from 0 to 1024 [ 323.011245][ T4463] hfsplus: b-tree write err: -5, ino 4 [ 323.325368][ T9946] loop3: detected capacity change from 0 to 32768 [ 323.360530][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 323.445898][ T9946] XFS (loop3): Mounting V5 Filesystem [ 323.536501][ T9946] XFS (loop3): Ending clean mount [ 323.543807][ T9946] XFS (loop3): Quotacheck needed: Please wait. [ 323.641588][ T9946] XFS (loop3): Quotacheck: Done. [ 323.652110][ T9946] tmpfs: Unknown parameter 'usrquota' [ 324.110868][ T5759] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 324.321685][ T5759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.345177][ T5759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.379375][ T5759] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 324.395177][ T9965] device syzkaller0 entered promiscuous mode [ 324.401743][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 324.416608][ T5759] usb 2-1: SerialNumber: syz [ 324.426778][ T4274] XFS (loop3): Unmounting Filesystem [ 324.641905][ T5759] usb 2-1: 0:2 : does not exist [ 324.712890][ T5759] usb 2-1: USB disconnect, device number 4 [ 325.577108][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.444176][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 328.924283][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 329.502993][T10028] device syzkaller0 entered promiscuous mode [ 329.579893][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 331.940847][T10064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2179'. [ 331.950447][T10064] bond0: invalid ARP target 0.0.0.0 specified for addition [ 331.957694][T10064] bond0: option arp_ip_target: invalid value (0) [ 332.191178][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'. [ 332.254559][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2183'. [ 335.824810][T10101] device syzkaller0 entered promiscuous mode [ 335.863895][T10107] device syzkaller0 entered promiscuous mode [ 336.015597][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 338.177591][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 338.251869][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.271062][T10128] loop0: detected capacity change from 0 to 64 [ 338.271133][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.319825][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.339485][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.356210][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.384469][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.409242][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.427440][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.444463][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.457021][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.474133][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.491130][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.506986][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.515388][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.523621][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.531690][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.539339][ T5758] hid-generic 0002:0004:0009.0004: unknown main item tag 0x0 [ 338.549304][ T5758] hid-generic 0002:0004:0009.0004: hidraw0: HID v0.04 Device [syz0] on syz0 [ 338.724979][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 338.932378][ T126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.969874][ T126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 339.011066][ T126] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 339.073982][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 339.075209][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 339.127644][T10146] fido_id[10146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 339.142632][ T126] usb 4-1: SerialNumber: syz [ 339.273739][T10155] device syzkaller0 entered promiscuous mode [ 339.296230][T10157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2214'. [ 339.366534][ T126] usb 4-1: 0:2 : does not exist [ 339.428969][ T126] usb 4-1: USB disconnect, device number 3 [ 339.719403][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.011790][T10178] loop3: detected capacity change from 0 to 64 [ 342.544480][T10189] device syzkaller0 entered promiscuous mode [ 344.980784][T10218] loop2: detected capacity change from 0 to 1024 [ 345.132562][ T4454] hfsplus: b-tree write err: -5, ino 4 [ 345.726494][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 345.931565][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.946941][ T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.969230][ T14] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 345.978490][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 345.987040][ T14] usb 3-1: SerialNumber: syz [ 346.219160][ T14] usb 3-1: 0:2 : does not exist [ 346.264487][ T14] usb 3-1: USB disconnect, device number 6 [ 346.503188][T10214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2226'. [ 346.650581][T10225] loop0: detected capacity change from 0 to 64 [ 346.704339][T10228] device syzkaller0 entered promiscuous mode [ 348.837063][T10244] loop3: detected capacity change from 0 to 1024 [ 348.845205][T10249] device syzkaller0 entered promiscuous mode [ 349.552977][ T4466] hfsplus: b-tree write err: -5, ino 4 [ 350.275894][T10259] device syzkaller0 entered promiscuous mode [ 350.762972][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2247'. [ 350.923327][T10274] loop0: detected capacity change from 0 to 64 [ 351.224290][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 351.441569][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.692353][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.746369][ T26] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.771088][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 351.779592][ T26] usb 5-1: SerialNumber: syz [ 351.788717][T10289] loop6: detected capacity change from 0 to 524287999 [ 352.491837][ T26] usb 5-1: 0:2 : does not exist [ 352.583834][ T26] usb 5-1: USB disconnect, device number 2 [ 352.881757][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 353.335052][T10292] loop4: detected capacity change from 0 to 1024 [ 353.520881][ T4463] hfsplus: b-tree write err: -5, ino 4 [ 354.040490][T10301] ubi31: attaching mtd0 [ 354.060326][T10301] ubi31: scanning is finished [ 354.445930][T10301] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 354.453756][T10301] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 354.461298][T10301] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 354.468507][T10301] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 354.476197][T10301] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 354.483278][T10301] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 354.491551][T10301] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 34939730 [ 354.501670][T10301] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 354.580237][T10303] ubi31: background thread "ubi_bgt31d" started, PID 10303 [ 355.048865][T10314] loop0: detected capacity change from 0 to 1024 [ 355.087053][T10314] EXT4-fs: Ignoring removed orlov option [ 355.115785][T10314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 355.148617][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 355.148634][ T27] audit: type=1800 audit(1753439564.294:47): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2259" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 355.210770][ T27] audit: type=1804 audit(1753439564.304:48): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2259" name="/newroot/434/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 356.830551][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 356.833619][T10321] loop1: detected capacity change from 0 to 64 [ 356.917714][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'. [ 358.083217][T10339] loop4: detected capacity change from 0 to 1024 [ 358.261563][ T4369] hfsplus: b-tree write err: -5, ino 4 [ 358.349894][ T9867] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 358.364791][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 359.338496][T10353] loop4: detected capacity change from 0 to 32768 [ 359.348507][ T9867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.370366][ T9867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.386801][ T9867] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.396222][ T9867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 359.405136][ T9867] usb 4-1: SerialNumber: syz [ 359.414888][T10353] XFS (loop4): Mounting V5 Filesystem [ 359.428025][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2273'. [ 359.519892][T10353] XFS (loop4): Ending clean mount [ 359.527323][T10353] XFS (loop4): Quotacheck needed: Please wait. [ 359.597489][T10353] XFS (loop4): Quotacheck: Done. [ 359.620918][T10351] tmpfs: Unknown parameter 'usrquota' [ 359.635018][T10356] bridge16: port 1(vlan2) entered blocking state [ 359.655913][ T9867] usb 4-1: 0:2 : does not exist [ 359.667990][ T9867] usb 4-1: unit 5 not found! [ 359.713095][T10356] bridge16: port 1(vlan2) entered disabled state [ 359.726335][ T9867] usb 4-1: USB disconnect, device number 4 [ 359.766115][T10356] device vlan2 entered promiscuous mode [ 359.799893][T10356] device veth1 entered promiscuous mode [ 359.815778][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2276'. [ 359.908127][ T4267] XFS (loop4): Unmounting Filesystem [ 360.001404][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.314093][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 360.430774][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2283'. [ 362.494861][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2286'. [ 363.382151][T10398] device syzkaller0 entered promiscuous mode [ 365.534528][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2289'. [ 365.547275][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2291'. [ 365.797985][T10424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2296'. [ 366.070061][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 366.382154][T10444] tipc: Enabling of bearer rejected, failed to enable media [ 366.396566][T10444] device syzkaller0 entered promiscuous mode [ 366.454950][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 367.249837][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'. [ 367.436570][T10457] tipc: Enabling of bearer rejected, failed to enable media [ 367.547415][T10457] device syzkaller0 entered promiscuous mode [ 367.597344][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 367.640281][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2309'. [ 367.678747][T10467] device veth0_to_bond left promiscuous mode [ 367.688569][T10467] bridge14: port 1(veth0_to_bond) entered disabled state [ 369.916558][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'. [ 370.197588][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2317'. [ 370.412044][T10503] tipc: Enabling of bearer rejected, failed to enable media [ 370.444972][T10503] device syzkaller0 entered promiscuous mode [ 370.660836][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 370.740314][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 371.836225][T10532] tipc: Enabling of bearer rejected, failed to enable media [ 371.971849][T10532] device syzkaller0 entered promiscuous mode [ 372.056515][T10539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2333'. [ 374.371575][T10559] tipc: Enabling of bearer rejected, failed to enable media [ 374.533224][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 374.617115][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2342'. [ 374.967598][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2348'. [ 376.022182][T10603] tipc: Enabling of bearer rejected, failed to enable media [ 376.237133][T10603] device syzkaller0 entered promiscuous mode [ 378.334336][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2357'. [ 378.360606][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'. [ 378.383773][T10620] tipc: Enabling of bearer rejected, failed to enable media [ 378.491786][T10622] device syzkaller0 entered promiscuous mode [ 378.500698][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 378.692583][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.700781][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.507204][T10643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2362'. [ 379.582956][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 379.898579][T10661] [ 379.900995][T10661] ====================================================== [ 379.908045][T10661] WARNING: possible circular locking dependency detected [ 379.915103][T10661] 6.1.147-syzkaller #0 Not tainted [ 379.920246][T10661] ------------------------------------------------------ [ 379.927293][T10661] syz.2.2368/10661 is trying to acquire lock: [ 379.933471][T10661] ffffffff8de8d918 (nr_neigh_list_lock){+...}-{2:2}, at: nr_del_node+0x512/0x8d0 [ 379.942676][T10661] [ 379.942676][T10661] but task is already holding lock: [ 379.950065][T10661] ffff88802bf08670 (&nr_node->node_lock){+...}-{2:2}, at: nr_del_node+0x152/0x8d0 [ 379.959340][T10661] [ 379.959340][T10661] which lock already depends on the new lock. [ 379.959340][T10661] [ 379.969804][T10661] [ 379.969804][T10661] the existing dependency chain (in reverse order) is: [ 379.978848][T10661] [ 379.978848][T10661] -> #2 (&nr_node->node_lock){+...}-{2:2}: [ 379.987151][T10661] _raw_spin_lock_bh+0x32/0x50 [ 379.992494][T10661] nr_del_node+0x152/0x8d0 [ 379.997472][T10661] nr_rt_ioctl+0x982/0xd40 [ 380.002450][T10661] sock_do_ioctl+0xd3/0x2f0 [ 380.007529][T10661] sock_ioctl+0x4ed/0x6e0 [ 380.012424][T10661] __se_sys_ioctl+0xfa/0x170 [ 380.017586][T10661] do_syscall_64+0x4c/0xa0 [ 380.022563][T10661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.029027][T10661] [ 380.029027][T10661] -> #1 (nr_node_list_lock){+...}-{2:2}: [ 380.036895][T10661] _raw_spin_lock_bh+0x32/0x50 [ 380.042231][T10661] nr_rt_device_down+0xa5/0x710 [ 380.047733][T10661] nr_device_event+0x133/0x140 [ 380.053075][T10661] raw_notifier_call_chain+0xcb/0x160 [ 380.058982][T10661] __dev_notify_flags+0x178/0x2d0 [ 380.064564][T10661] dev_change_flags+0xe3/0x1a0 [ 380.069858][T10661] dev_ifsioc+0x159/0xe90 [ 380.074815][T10661] dev_ioctl+0x578/0xea0 [ 380.079590][T10661] sock_do_ioctl+0x222/0x2f0 [ 380.084713][T10661] sock_ioctl+0x4ed/0x6e0 [ 380.089577][T10661] __se_sys_ioctl+0xfa/0x170 [ 380.094702][T10661] do_syscall_64+0x4c/0xa0 [ 380.099651][T10661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.106100][T10661] [ 380.106100][T10661] -> #0 (nr_neigh_list_lock){+...}-{2:2}: [ 380.114036][T10661] __lock_acquire+0x2cf8/0x7c50 [ 380.119426][T10661] lock_acquire+0x1b4/0x490 [ 380.124486][T10661] _raw_spin_lock_bh+0x32/0x50 [ 380.129793][T10661] nr_del_node+0x512/0x8d0 [ 380.134755][T10661] nr_rt_ioctl+0x982/0xd40 [ 380.139739][T10661] sock_do_ioctl+0xd3/0x2f0 [ 380.144789][T10661] sock_ioctl+0x4ed/0x6e0 [ 380.149652][T10661] __se_sys_ioctl+0xfa/0x170 [ 380.154811][T10661] do_syscall_64+0x4c/0xa0 [ 380.159946][T10661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.166459][T10661] [ 380.166459][T10661] other info that might help us debug this: [ 380.166459][T10661] [ 380.176691][T10661] Chain exists of: [ 380.176691][T10661] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 380.176691][T10661] [ 380.190524][T10661] Possible unsafe locking scenario: [ 380.190524][T10661] [ 380.197980][T10661] CPU0 CPU1 [ 380.203359][T10661] ---- ---- [ 380.208741][T10661] lock(&nr_node->node_lock); [ 380.213516][T10661] lock(nr_node_list_lock); [ 380.220635][T10661] lock(&nr_node->node_lock); [ 380.227926][T10661] lock(nr_neigh_list_lock); [ 380.232621][T10661] [ 380.232621][T10661] *** DEADLOCK *** [ 380.232621][T10661] [ 380.240768][T10661] 2 locks held by syz.2.2368/10661: [ 380.245999][T10661] #0: ffffffff8de8d978 (nr_node_list_lock){+...}-{2:2}, at: nr_del_node+0xfc/0x8d0 [ 380.255452][T10661] #1: ffff88802bf08670 (&nr_node->node_lock){+...}-{2:2}, at: nr_del_node+0x152/0x8d0 [ 380.265150][T10661] [ 380.265150][T10661] stack backtrace: [ 380.271072][T10661] CPU: 1 PID: 10661 Comm: syz.2.2368 Not tainted 6.1.147-syzkaller #0 [ 380.279249][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.289322][T10661] Call Trace: [ 380.292610][T10661] [ 380.295555][T10661] dump_stack_lvl+0x168/0x22e [ 380.300262][T10661] ? load_image+0x3b0/0x3b0 [ 380.304776][T10661] ? show_regs_print_info+0x12/0x12 [ 380.309987][T10661] ? print_circular_bug+0x12b/0x1a0 [ 380.315201][T10661] check_noncircular+0x274/0x310 [ 380.320158][T10661] ? add_chain_block+0x940/0x940 [ 380.325109][T10661] ? lockdep_lock+0xdc/0x1e0 [ 380.329728][T10661] ? mark_lock+0x94/0x320 [ 380.334085][T10661] ? _find_first_zero_bit+0xcf/0x100 [ 380.339388][T10661] __lock_acquire+0x2cf8/0x7c50 [ 380.344282][T10661] ? verify_lock_unused+0x140/0x140 [ 380.349504][T10661] ? verify_lock_unused+0x140/0x140 [ 380.354744][T10661] ? stack_trace_save+0x98/0xe0 [ 380.359615][T10661] ? __stack_depot_save+0x35/0x460 [ 380.364752][T10661] ? security_file_ioctl+0x6c/0xa0 [ 380.369880][T10661] ? __se_sys_ioctl+0x48/0x170 [ 380.374657][T10661] lock_acquire+0x1b4/0x490 [ 380.379176][T10661] ? nr_del_node+0x512/0x8d0 [ 380.383775][T10661] ? __local_bh_enable_ip+0x12a/0x1b0 [ 380.389167][T10661] ? read_lock_is_recursive+0x10/0x10 [ 380.394552][T10661] ? __bpf_trace_softirq+0x10/0x10 [ 380.399713][T10661] ? __rwlock_init+0x140/0x140 [ 380.404517][T10661] ? do_raw_spin_unlock+0x11d/0x230 [ 380.409761][T10661] ? nr_neigh_get_dev+0xbd/0x130 [ 380.414715][T10661] ? nr_del_node+0x512/0x8d0 [ 380.419323][T10661] _raw_spin_lock_bh+0x32/0x50 [ 380.424102][T10661] ? nr_del_node+0x512/0x8d0 [ 380.428706][T10661] nr_del_node+0x512/0x8d0 [ 380.433135][T10661] nr_rt_ioctl+0x982/0xd40 [ 380.437562][T10661] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 380.443237][T10661] ? nr_dev_get+0x370/0x370 [ 380.447748][T10661] ? slab_free_freelist_hook+0x131/0x1a0 [ 380.453407][T10661] ? apparmor_capable+0x12c/0x190 [ 380.458485][T10661] ? capable+0x84/0xe0 [ 380.462617][T10661] ? nr_ioctl+0x157/0x300 [ 380.466977][T10661] sock_do_ioctl+0xd3/0x2f0 [ 380.471496][T10661] ? sock_show_fdinfo+0xb0/0xb0 [ 380.476364][T10661] sock_ioctl+0x4ed/0x6e0 [ 380.480735][T10661] ? sock_poll+0x3f0/0x3f0 [ 380.485169][T10661] ? bpf_lsm_file_ioctl+0x5/0x10 [ 380.490130][T10661] ? security_file_ioctl+0x7c/0xa0 [ 380.495253][T10661] ? sock_poll+0x3f0/0x3f0 [ 380.499693][T10661] __se_sys_ioctl+0xfa/0x170 [ 380.504317][T10661] do_syscall_64+0x4c/0xa0 [ 380.508737][T10661] ? clear_bhb_loop+0x60/0xb0 [ 380.513419][T10661] ? clear_bhb_loop+0x60/0xb0 [ 380.518103][T10661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.524021][T10661] RIP: 0033:0x7f6418b8e9a9 [ 380.528539][T10661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.548177][T10661] RSP: 002b:00007f6419a34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.556620][T10661] RAX: ffffffffffffffda RBX: 00007f6418db5fa0 RCX: 00007f6418b8e9a9 [ 380.564607][T10661] RDX: 0000200000000680 RSI: 000000000000890c RDI: 0000000000000007 [ 380.572602][T10661] RBP: 00007f6418c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 380.580601][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.588578][T10661] R13: 0000000000000000 R14: 00007f6418db5fa0 R15: 00007fffdaf86d88 [ 380.596563][T10661]